Privacy Policy
Version 2026-11-09-draft
Draft. This text has not yet been reviewed by a lawyer and is not final. Items in [square brackets] are still to be filled in.
1. What this covers
This policy explains what [Company legal name] (“CRNA Platform”) collects, why, who sees it and what you can do. It goes with our Terms of Service.
2. What we collect
Account details: your email address, your sign-in and two-step verification records, and whether you are a CRNA, facility or agency.
For CRNAs: your name, city and state, experience, case types and rate preferences; your credential file (licenses, certifications, insurance, references and other documents you upload, with dates); license and registration numbers; your NPI; for the Texas credentialing application, your date of birth, home address and phone, education, work history, references, insurance and hospital privileges; and health records you add, such as vaccination and TB results.
Results of the registry and exclusion-list searches we run (the date, the list and the result), and a founder's decision when a possible match is reviewed.
For facilities and agencies: your organization's name, your requirement checklist, your job listings and your decisions on applicants. Messages and offers sent through the site.
A record of activity for security and your protection: who viewed or downloaded what and when (names of columns, not their contents), and when you accepted our terms.
If you join our launch list: your email address and whether you are a CRNA, a facility or an agency.
We do not collect Social Security numbers, bank details or patient information, and we ask you not to add them.
3. How we use it
Launch list addresses are used only to email you about CRNA Platform: when jobs open and occasional launch updates. Every email has an unsubscribe link, and we keep an address until you unsubscribe or ask us to remove it. We send these emails through an email service provider, which handles the address on our behalf.
To run the service: match CRNAs with jobs, show facilities how complete a CRNA's file is, prepare packets and application forms, run the registry searches, handle bookings and messages, keep the site secure, and answer your questions. We do not sell your information and do not use it for advertising.
4. Who sees what
Facilities and agencies see only a limited profile (first name and last initial, experience, case types, credential status and general area) before you are booked, and your full file, including health records, only after you are booked and only through a sharing grant that ends 30 days after the job unless you end it sooner. Your access history shows each organization that opened your documents, license numbers, packet or application form.
License and registration numbers and dates of birth are encrypted before they are stored. Documents are kept in private storage and opened only through short-lived links after a permission check. Health records are stored separately from the rest of your file.
A small number of CRNA Platform founders review license and certification lookups and possible list matches. Platform staff have no standing access to your sensitive or health information.
We do not share your information with anyone else except the service providers that run the site for us (hosting and database, email and text messaging, payment processing) under terms that limit their use to our service, where the law requires it, or in a sale or restructuring of the business with the same protections. [Attorney: confirm provider list and any required notices.]
5. How long we keep it
We keep your file while your account is open. If you ask us to close your account, we delete your file and personal details, except records we must or reasonably need to keep, such as the audit log of who opened files, our acceptance records and billing records. Records of booking cancellations and confirmed no-shows (which job, when, with how much notice, the NPI, and the name of the person or organization that cancelled) are kept after an account is closed, because the other party may rely on them. Listings, messages and similar records stay, without the link to your account. Facilities that already received your information under a grant may keep it under their own legal duties and policies. [Attorney: retention periods.]
6. Your choices
You can see and change what is in your file, stop sharing a file you shared, see who opened it, turn off invitations, and ask us to correct or delete your information at [legal contact email]. We may need to confirm it is you first.
7. Security and incidents
Two-step verification is required for every account, access is limited by the database itself and not only by the website, and activity is logged. No system is perfectly secure. If something happens that affects your information, we will tell you as the law requires. [Attorney: breach notification terms.]
8. Children, changes and contact
CRNA Platform is for adults; we do not knowingly collect information from anyone under 18. If we change this policy we will ask you to accept the new version. Questions: [legal contact email].